Disabled Exchange Account Still Accepts Emails: How to Fix NDR Issues
Question details
Investigate and resolve the issue where emails sent to a disabled Microsoft 365 or Exchange account are successfully delivered instead of returning a Non-Delivery Report (NDR).
- Product
- Microsoft Exchange
- Device & OS
- not provided
- Scenario
- An administrator has disabled an Exchange account, but senders are not receiving undeliverable bounce-backs (NDRs) for this specific account, unlike other disabled accounts.
- Observed behavior
- The disabled mailbox continues to accept incoming mail silently, failing to generate the expected non-delivery report to the sender.
Ensure you have Exchange Administrator or Global Administrator privileges to access the Microsoft 365 admin center and run message traces.
Verify Mailbox State, Licenses, and Mail Flow Configurations
Check the exact retention state of the mailbox and inspect for active licenses or forwarding rules that keep the mailbox active.
Blocking a user's sign-in status does not automatically stop a mailbox from receiving emails. The mailbox must be properly de-licensed or deleted to trigger an NDR.
Log into the Microsoft 365 admin center. Navigate to 'Users' > 'Active users' and select the disabled account. Ensure that 'Block sign-in' is applied and verify that the Exchange Online license has been removed.
Open the Exchange Admin Center (EAC). Check the mailbox settings for any active forwarding rules. Next, go to 'Mail flow' > 'Rules' to ensure no transport rules are rerouting emails sent to this address.
In the EAC, navigate to 'Mail flow' > 'Message trace'. Start a trace specifying the disabled account as the recipient. Review the trace details to see exactly where the message is being delivered (e.g., an archive, a shared mailbox, or retained storage).
Force Directory Synchronization (Hybrid Environments)
Ensure that changes made to the on-premises Active Directory have successfully synced to Exchange Online.
Looking for a seamless and lightweight Microsoft Office alternative?
While you troubleshoot Exchange server configurations, ensure your team has reliable document editing tools. WPS Office provides a highly compatible, lightweight, and entirely free alternative to Microsoft Word, Excel, and PowerPoint.
- 1. Download and Install: Get the free WPS Office installer from the official website and install it on your device.
- 2. Open Existing Documents: Double-click any Microsoft Word, Excel, or PowerPoint file to open it directly in WPS Office with formatting preserved.
- 3. Edit and Share: Use the familiar interface to edit documents and easily share them with colleagues in standard Office formats.
Frequently Asked Questions
Does blocking sign-in automatically stop incoming emails?
No. Blocking sign-in only prevents the user from logging into the account. It does not delete the mailbox, remove the license, or stop the mailbox from receiving incoming emails.
How long does it take for a disabled Exchange account to start returning NDRs?
Once a license is completely removed or an account is deleted, it can take up to 24 hours for Microsoft 365 to fully process the change across its servers and start issuing Non-Delivery Reports for incoming mail.
Why do some disabled accounts return an NDR immediately while others do not?
If an account is hard-deleted or the mailbox is permanently removed without any retention policies applied, the Exchange routing stops recognizing the address immediately, resulting in an instant NDR. Accounts that merely have sign-ins blocked or are under a Litigation Hold will continue to receive mail silently.
